Your training programme includes induction and refresher training for all staff on data protection and information governance.
Ways to meet our expectations:
Appropriate staff, such as the DPO or an information governance manager, oversee or approve induction training.
Your staff receive induction and refresher training, regardless of how long they will be working for your organisation, their contractual status or grade.
Your staff receive induction training prior to accessing personal data and within one month of their start date.
Your staff complete refresher training at appropriate intervals.
Can you answer yes to the following questions?
- Could we observe your training delivery methods?
- Is it effective?
- Do you follow up on ‘no shows’?
- Could staff explain their training records?